Personal Data Processing Clause
1. The personal data controller is CFA SOCIETY POLAND with its registered office in Wrocław, ul. Komandorska 118/120, 53-345 Wrocław, registered in the National Court Register kept by the District Court for Wrocław-Fabryczna in Wrocław under file number: 0000222537, NIP number 8992528090. Email address: office@cfa.com.pl.
2. Personal data are processed in compliance with the rules laid down in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), and in the Polish Personal Data Protection Act, executive regulations to this Act and in the Act on Provision of Electronic Services of 18 July 2002 (Journal of Laws of 2002, No. 144, Item 1204, as amended).
3. Personal data may be processed for legitimate purposes, the performance of contracts and obligations arising from such contracts, including for the purpose of mailing promotion and information materials, market research and public opinion research.
4. Your personal data may be made available to relevant recipients, in particular, the CFA Institute Research Challenge competition partners, third parties providing IT or legal services to the controller or institutions authorized to control the controller’s activity or institutions authorized to obtain personal data pursuant to provisions of law.
5. Your personal data will be stored until elapse of the statute of the limitation period for claims or until the expiry of legitimate interest in the processing or until submission of an objection (with regard to processing based on the necessity of processing for purposes arising from the controller’s legitimate interests).
6. You have the right to access your data and the right to demand their rectification, their erasure or restriction of their processing. To the extent to which the processing of your personal data is based on the controller’s legitimate interest, you have the right to object to the processing of your personal data. To the extent to which the processing of your personal data is based on consent, you have the right to withdraw your consent. The withdrawal of your consent will not affect the lawfulness of the processing of your personal data which was conducted on the basis of your consent prior to its withdrawal. To the extent to which your personal data are processed automatically for the purpose of concluding or performing a contract or processed on the basis of consent, you also have the right to transfer your personal data, i.e. to receive your personal data from the controller in a structured, generally used, machine-readable format. You can send such data to another data controller. You also have the right to file a complaint with the regulatory authority dealing with personal data protection. To exercise the above rights you should contact the data controller or personal data officer. The contact details are provided in item 1 above.
7. The controller uses adequate technical and organizational measures that ensure the security of the personal data processed, adequately to the threats and categories of protected personal data, in particular, secure the data against unauthorized disclosure, viewing and interception by an unauthorized person, processing in breach of applicable regulations and against modification, loss, damage or destruction.